Cisco Nexus 7000 Series, Command Reference Manual

Page: 662 / 1018

rule
To configure rules for a user role or for users of privilege roles, use the rule command. To delete a rule, use
the no form of this command.
rule number { deny| permit } { command command-string | { read| read-write } oid snmp_oid_name [ feature
feature-name | feature-group group-name ]}
no rule number
Syntax Description
Sequence number for the rule. The Cisco NX-OS
software applies the rule with the highest value first
and then the rest in descending order. The range is 1
to 256. number
Denies access to commands or features. deny
Permits access to commands or features. permit
Specifies a command string.
command command-string
Specifies read access. read
Specifies read and write access.
read-write
Specifies a read-only or read-and-write-rule for an
SNMP object identifier (OID). The range it 1 to 32
elements. oid snmp_oid_name
(Optional) Specifies a feature name. Use the
show
role feature
command to list the Cisco NX-OS
feature names.
feature feature-name
(Optional) Specifies a feature group. feature-group group-name
Command Default
None
Command Modes
User role configuration
Command History
Modification Release
This command was introduced. 4.0(1)
Added the oid keyword. 6.0(1)
Cisco Nexus 7000 Series Security Command Reference
636
R Commands
rule